From 37654cc825c718b4783f0f9058bc4f4367f11b41 Mon Sep 17 00:00:00 2001 From: mikl Date: Sun, 12 Jul 2026 22:45:58 +0300 Subject: [PATCH 1/2] heather: jitsi images via docker hub (ghcr.io/jitsi/* not found, private) env.example claims JITSI_IMAGE_REPO=ghcr.io/jitsi default but actual images not found there (denied). docker.io/jitsi/*:stable-11031 works. --- hosts/heather/arion-compose.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/hosts/heather/arion-compose.nix b/hosts/heather/arion-compose.nix index 9de5f32..3d92eff 100644 --- a/hosts/heather/arion-compose.nix +++ b/hosts/heather/arion-compose.nix @@ -148,7 +148,7 @@ # Установлено с нуля 2026-07-12 по официальным докам: # https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker # Репо: https://github.com/jitsi/docker-jitsi-meet (release stable-11031). - # Образы на GHCR: ghcr.io/jitsi/* (JITSI_IMAGE_REPO default). + # Образы на GHCR: jitsi/* (JITSI_IMAGE_REPO default). # Минимальный стек: web/prosody/jicofo/jvb. Coturn НЕ входит в официальный # compose — подключается опционально для NAT traversal (пока без него, # JVB на :10000/udp + STUN достаточно для большинства клиентов). @@ -161,7 +161,7 @@ # - Authentication: internal (users через prosodyctl в контейнере prosody). # Документация: https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker jitsi-web = { - service.image = "ghcr.io/jitsi/web:stable-11031"; + service.image = "jitsi/web:stable-11031"; service.container_name = "jitsi-web"; service.restart = "unless-stopped"; service.ports = [ "127.0.0.1:8000:80" ]; @@ -211,7 +211,7 @@ }; jitsi-prosody = { - service.image = "ghcr.io/jitsi/prosody:stable-11031"; + service.image = "jitsi/prosody:stable-11031"; service.container_name = "jitsi-prosody"; service.restart = "unless-stopped"; service.expose = [ "5222" "5269" "5347" "5280" ]; @@ -231,7 +231,7 @@ }; jitsi-jicofo = { - service.image = "ghcr.io/jitsi/jicofo:stable-11031"; + service.image = "jitsi/jicofo:stable-11031"; service.container_name = "jitsi-jicofo"; service.restart = "unless-stopped"; service.ports = [ "127.0.0.1:8888:8888" ]; @@ -249,7 +249,7 @@ }; jitsi-jvb = { - service.image = "ghcr.io/jitsi/jvb:stable-11031"; + service.image = "jitsi/jvb:stable-11031"; service.container_name = "jitsi-jvb"; service.restart = "unless-stopped"; service.ports = [ From 3b354c9cccc491bae31e1eaeb7b7dde28a73f0c3 Mon Sep 17 00:00:00 2001 From: mikl Date: Sun, 12 Jul 2026 23:15:08 +0300 Subject: [PATCH 2/2] heather: jitsi-web drop crontabs volume mount (perms conflict with /config) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Same named volume on /config and /var/spool/cron/crontabs inherited 1730 drwx-wx--T from crontabs dir — nginx (www-data) couldn't traverse /config, Permission denied on config.js. Crontabs not needed; transcripts stay separate. --- hosts/heather/arion-compose.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/hosts/heather/arion-compose.nix b/hosts/heather/arion-compose.nix index 3d92eff..a9c9c55 100644 --- a/hosts/heather/arion-compose.nix +++ b/hosts/heather/arion-compose.nix @@ -167,7 +167,6 @@ service.ports = [ "127.0.0.1:8000:80" ]; service.volumes = [ "jitsi-web:/config" - "jitsi-web:/var/spool/cron/crontabs" "jitsi-transcripts:/usr/share/jitsi-meet/transcripts" ]; service.depends_on = [ "jitsi-jvb" ];